Vulnerabilities > Libsndfile Project > Libsndfile > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-04-07 CVE-2017-7585 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Libsndfile Project Libsndfile
In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.
4.3
2015-11-19 CVE-2014-9756 Divide By Zero vulnerability in multiple products
The psf_fwrite function in file_io.c in libsndfile allows attackers to cause a denial of service (divide-by-zero error and application crash) via unspecified vectors related to the headindex variable.
network
low complexity
libsndfile-project canonical opensuse CWE-369
5.0